IBX-8356: Reworked JWT firewall to be in-tact with the new Symfony auth

[konradoboza]

🎫 Issue	IBX-8356

Related PRs:

• IBX-8356: Removed Ibexa\Core\MVC\Symfony\Security\Authentication\AuthenticatorInterface to be replaced with Symfony-based authentication core#375 (will be merged at the end, not blocking this part)
• IBX-8356: Reworked Ibexa\Core\MVC\Symfony\Security\Authentication\AuthenticatorInterface usages to comply with Symfony-based authentication rest#101

Description:

This PR is about making JWT authentication compliant with the Symfony security changes (and bringing it back in the first place 😅). The main source of truth that was used is https://symfony.com/bundles/LexikJWTAuthenticationBundle/current/index.html#symfony-5-3-and-higher.

Additionally, I used

username_path: JWTInput.username
password_path: JWTInput.password

to make the request payload BC safe (username and password are taken from specific keys from the payload so no changes are needed on consumer's end).

For QA:

Documentation:

If we mention security configuration changes anywhere, we need to include changes from this PR as well.

[github-actions]

Thanks for contribution! 🎉

To test the changes please execute:

composer config extra.symfony.endpoint https://api.github.com/repos/ibexa/recipes-dev/contents/index.json?ref=flex/pull-122

before executing the recipes.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarCloud